Full Stack Testing

Table of contents

1. 1. Introduction to Full Stack Testing
   1. Full Stack Testing for High Quality
   2. Shift-Left Testing
   3. Ten Full Stack Testing Skills
   4. Key Takeaways
2. 2. Security Testing
   1. Common Cyber Attacks
      1. Web Scraping
      2. Brute Force
      3. Social Engineering
      4. Phishing
      5. Cross-site Scripting
      6. Ransomware
      7. Cookie Forging
      8. Cryptojacking
   2. Threats Framework
      1. Spoofed Identity
      2. Tampering with Inputs
      3. Repudiation of Actions
      4. Information Disclosure
      5. Denial of Services
      6. Escalation of Privileges
   3. Application Vulnerabilities
      1. Code or SQL Injection
      2. Cross-Site Scripting (XSS)
      3. Unhandled Known Vulnerabilities
      4. Authentication and Session Mismanagement
      5. Unencrypted Private Data
      6. Application misconfigurations
      7. Application Secrets Exposure
   4. Threat Modeling
      1. Threat Modeling Steps
      2. Threat Modeling Exercise
      3. Security Test Cases from the Threat Model
   5. Security Testing Strategy
      1. Static Application Security Testing (SAST)
      2. Source Composition Analysis (SCA)
      3. Image Scanning
      4. Dynamic Application Security Testing (DAST)
      5. Functional Security Tests Automation
      6. Manual Exploratory Testing
      7. Pen Testing
      8. Runtime Application Self Protection (RASP)
   6. Security Testing Tools
      1. Snyk IDE plugin
      2. Talisman Pre-commit Hook
      3. OWASP Dependency-Check
      4. OWASP ZAP
      5. Chrome DevTools & Postman
   7. Security as a habit
   8. Key Takeaways